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(54) APPARATUS FOR DATA DISTRIBUTION, AND TERMINAL FOR DATA DISTRIBUTION 



(57) A contents database in which data of contents 
enciphered by a C key and the C key are stored is pro- 
vided for a contents server. The contents data enci- 
phered by the C key and the C key are enciphered by an 
M key and sent to a user machine. In the user machine, 
the contents data enciphered by the C key and the C 
key are stored in a storage device. Upon reproduction, 



the contents data enciphered by the C key and the C 
key from the storage device are sent to an encipher- 
ing/decoding processing unit and decoded and charg- 
ing is performed in accordance with the C key. A DA 
code which dynamically changes with the elapse of time 
is added to the C key. 
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Description 
Technical Field 

[0001 ] The invention relates to an information dis- 
tributing system comprising: a contents server in which, 
for example, a plurality of music data is accumulated; 
and a user machine to which desired contents is distrib- 
uted from contents accumulated in the contents server. 
Particularly, the invention relates to a protection and 
charging of contents. 

Background Art 

[0002] In recent years, various services using a 
computer network are being realized owing to the 
spread of Internet and a satellite communication. As 
one of the services using such a computer network, a 
system for performing the following music distributing 
service has been proposed. 

[0003] In Fig. 14, reference numeral 501 denotes a 
contents server and 502 indicates a user machine. A 
plurality of music data has been accumulated as con- 
tents in the contents server 501 . A storage device 504 
such as hard disk drive, optical disk drive, or the like is 
connected to the user machine 502 and a card 
reader/writer 505 for charging is also connected thereto. 
A card 506 is loaded into the card reader/writer 505. 
[0004] In case of using the music distributing serv- 
ice, the user machine 502 is connected to the contents 
server 501 through a transmission path 503. The trans- 
mission path 503 is, for example, a computer network 
such as Internet. When the user machine 502 is con- 
nected to the contents server 501 , a list of contents or a 
search picture plane is sent from the contents server 
501 to the user machine 502. 

[0005] The user searches desired contents by the 
list of contents or search picture plane and selects con- 
tents to be downloaded. When the user selects the con- 
tents, a requesting command of the contents is sent 
from the user machine 502 to the contents server 501 . 
In the contents server 501, the contents is taken out in 
response to the requesting command and this contents 
is transmitted from the contents server 501 to the user 
machine 502. The contents is stored into the storage 
device 504 of the user machine 502. At this time, proper 
charging is performed by the card reader/writer 505. 
[0006] If such a music distributing system is spread, 
the user can easily obtain the music data of a desired 
music piece via a communication. A server in such a 
system is equipped with a searching function. By using 
such a searching function, the user can easily search a 
desired music piece and obtain it. Further, in the server 
in such a system, since the music data is always 
updated, a latest music piece can be early obtained. 
[0007] However, in a system such that the music 
data is distributed from the server to the user machine 
as mentioned above, there is a danger that the data of 



the contents is copied without permission and the right 
of author is not protected. Therefore, it is necessary to 
add a function for prevention of copy so that the data of 
the contents is not copied without permission and to 

5 perform proper charging for the contents. 

[0008] In such a system, it is considered to repro- 
duce the downloaded music data by another equipment 
or transfer it to other people. If the system is constructed 
so that the data of the contents is always moved to only 

w one equipment, there is no possibility that an illegal 
copy is distributed. However, rf the copy to the other 
equipment is perfectly inhibited, such a movement of 
the data of the contents cannot be performed as well. 
[0009] In a system which can distribute contents, 

is therefore, it is an object of the invention to provide an 
information distributing system which can sufficiently 
protect the contents and perform legal charging. 

Disclosure of Invention 

20 

[0010] According to the invention, there is provided 
a data distributing apparatus comprising: 

a first storing unit in which first identification data 
25 that is peculiar to equipment and second identifica- 
tion data corresponding to the first identification 
data have been stored; 

a first transmitting/receiving unit for transmitting dis- 
tribution request data of data together with the first 

30 identification data read out from the first storing unit 
and receiving the transmitted data; 
a first data storing unit for storing the data received 
by the first transmitting/receiving unit; 
a first signal processing unit for performing a 

35 decoding process to the data read out from the first 
data storing unit on the basis of the second identifi- 
cation data stored in the first storing unit; 
a first control unit for performing an operation to 
allow the data received by the first transmrt- 

40 ting/receiving unit to be stored into the first data 
storing unit and controlling the decoding processing 
operation by the first signal processing unit of the 
data read out from the first data storing unit; 
a second transmitting/receiving unit for receiving 

45 the first identification data and the distribution 
request data which were transmitted from the first 
transmitting/receiving unit and transmitting the 
data; 

a second data storing unit in which a plurality of 
so data is stored and which outputs data correspond- 
ing to the distribution request data; 
a second storing unit in which the second identifica- 
tion data corresponding to the transmitted first iden- 
tification data has been stored; 
55 a second signal processing unit for performing an 
enciphering process to the data outputted from the 
second data storing unit on the basis of the second 
identification data read out from the second storing 
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unit; and 

a second control unit for performing a reading con- 
trol of the second identification data from the sec- 
ond storing unit on the basts of the distribution 
request data and the first identification data which 
were transmitted and performing a reading control 
of the data from the second data storing unit on the 
basis of the distribution request data, 
wherein the data enciphered on the basis of the 
second identification data transmitted through the 
second transmitting/receiving unit is decoded by 
the first signal processing unit. 

[001 1 ] According to the invention, there is provided 
a data distributing apparatus comprising: 

at least one terminal equipment section having a 
first storing unit in which first identification data that 
is peculiar to equipment and second identification 
data corresponding to the first identification data 
have been stored, a first transmitting/receiving unit 
for transmitting distribution request data of data 
together with the first identification data read out 
from the first storing unit and receiving the transmit- 
ted data, a first storing unit for storing the data 
received by the first transmitting/receiving unit, a 
first signal processing unit for performing a decod- 
ing process to the data read out from the first data 
storing unit on the basis of the second identification 
data stored in the first storing unit, and a first control 
unit for performing an operation to allow the data 
received by the first transmitting/receiving unit to be 
stored into the first data storing unit and controlling 
the decoding processing operation by the first sig- 
nal processing unit of the data read out from the 
first data storing unit; and 

a server apparatus section having a second trans- 
mitting/receiving unit, connected to the terminal 
equipment section through a transmission path, for 
receiving the first identification data and the distri- 
bution request data which were transmitted from 
the first transmitting/receiving unit and transmitting 
the data, a second data storing unit in which a plu- 
rality of data is stored and which outputs data corre- 
sponding to the distribution request data, a second 
storing unit in which the second identification data 
corresponding to the transmitted first identification 
data has been stored, a second signal processing 
unit for performing an enciphering process to the 
data outputted from the second data storing unit on 
the basis of the second identification data read out 
from the second storing unit, and a second control 
unit for performing a reading control of the second 
identification data from the second data storing unit 
on the basis of the distribution request data and the 
first identification data which were transmitted and 
performing a reading control of the data from the 
second storing unit on the basis of the distribution 



request data, 

wherein the data enciphered on the basis of the 
second identification data transmitted through the 
second transmitting/receiving unit is decoded by 
5 the first signal processing unit. 

[0012] According to the invention, there is provided 
a terminal apparatus for data distribution, comprising: 

10 a storing unit in which first identification data that is 
peculiar to an apparatus and second identification 
data corresponding to the first identification data 
have been stored; 

a data transmitting/receiving unit for transmitting 
is distribution request data of data together with the 

first identification data read out from the storing unit 

and receiving data which was enciphered by the 

second identification data and transmitted; 

a data storing unit for storing the data which was 
20 enciphered on the basis of the second identification 

data and received by the data transmitting/receiving 

unit; 

a signal processing unit for performing a decoding 
process to the data read out from the data storing 

25 unit on the basis of the second identification data 
stored in the storing unit; and 
a control unit for performing the operation to store 
the data received by the data transmitting/receiving 
unit into the data storing unit and controlling the 

30 decoding processing operation by the signal 
processing unit of the data read out from the data 
storing unit. 

Brief Description of Drawings 

35 

[0013] Fig. 1 is a block diagram for use in explana- 
tion of a system using an M key in a data distributing 
system to which the invention can be applied. Fig. 2 is a 
block diagram for use in explanation of an encipher- 

40 ing/decoding processing unit of the system using the M 
key in the data distributing system to which the invention 
can be applied. Fig. 3 is a block diagram for use in 
explanation of a system using a C key in the data distrib- 
uting system to which the invention can be applied. Fig. 

45 4 is a block diagram for use in explanation of an enci- 
phering/decoding processing unit of the system using 
the C key in the data distributing system to which the 
invention can be applied. Fig. 5 is a flowchart for use in 
explanation of the system using the C key in the data 

so distributing system to which the invention can be 
applied. Fig. 6 is a block diagram for use in explanation 
of a system using a T key in a data distributing system 
to which the invention can be applied. Fig. 7 is a block 
diagram for use in explanation of an enciphering/decod- 

55 ing processing unit of the system using the T key in the 
data distributing system to which the invention can be 
applied. Figs. 8A and 8B are block diagrams for use in 
explanation of the enciphering/decoding processing unit 
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in the system using the T key in the data distributing 
system to which the invention can be applied. Fig. 9 is a 
block diagram for use in explanation of a system using a 
DA code in a data distributing system to which the 
invention can be applied. Fig. 10 is a schematic diagram 
for use in explanation of the DA code. Fig. 11 is a block 
diagram for use in explanation of an enciphering/decod- 
ing processing unit of the system using the DA code in 
the data distributing system to which the invention can 
be applied. Fig. 12 is a flowchart for use in explanation 
of the system using the DA code in the data distributing 
system to which the invention can be applied. Fig. 1 3 is 
a flowchart for use in explanation of the system using 
the DA code in the data distributing system to which the 
invention can be applied. Fig. 14 is a block diagram of 
an example of a conventional data distributing system. 

Best Mode for Carrying Out the Invention 

[0014] Embodiments of the invention will now be 
described hereinbelow with reference to the drawings. 
According to the invention, in a system for transferring 
data of contents, the data of contents can be protected 
and proper charging can be performed. Enciphering 
keys and codes which are used in the system will be 
first simply described. 

1 . Description of keys and codes 

[0015] In the system to which the invention is 
applied, the following enciphering keys and codes are 
used. 

(1) M key 

[0016] A role of an M (Machine) key is to enable 
data to be used only by specific equipment, namely, a 
user machine, which will be described hereinlater. The 
M key is allocated to each equipment at the time of, for 
example, shipping the equipment from a factory and is 
enciphering information peculiar to each equipment. In 
order to protect the M key, it is embedded in, for exam- 
ple, an enciphering/decoding processing unit of the 
equipment and cannot be extracted to the outside of the 
equipment. 

(2) MID code 

[001 7] A peculiar MID (Machine Identification) code 
is allocated to each equipment. The MID code is also 
allocated to each equipment at the time of shipment 
from the factory. The MID code is used only to specify 
each equipment and is not directly used as an encipher- 
ing key. Therefore, even if it leaks to the outside, a risk 
that the data protection is not guaranteed is small. The 
MID code can be embedded in, for example, the enci- 
phering/decoding processing unit of the equipment in a 
manner similar to the M key or can be stored in the other 



ROM or EEPROM. 

(3) C key 

5 [001 8] A role of a C (Contents) key is to protect data 
every contents. In this instance, the contents denotes a 
unit of a group of movable information. That is, in a sys- 
tem for charging for data, the contents indicates a unit of 
information as a target of charging. In case of a music 

10 server, when the charge is performed every music 
piece, a unit such as music data of each music piece 
indicates data of one contents. 

[001 9] Each contents is enciphered by using the C 
key that is peculiar to each contents. Therefore, only in 

is the equipment of the user side having the C key corre- 
sponding to the contents, the encryption of the contents 
can be decoded by using the C key and reproduced. As 
mentioned above, since the contents can be used only 
in the equipment of the user side having the C key, the 

20 C key can be also regarded as a key indicating the right 
in which the contents can be used. 

(4) Tkey 

25 [0020] A role of a T (Transfer) key is to protect data 
when the data is moved between user equipment. 
When the contents is moved between the equipment, 
there is a possibility that the C key leaks to the outside. 
Therefore, when data is moved between the equipment, 

30 the C key and the contents enciphered by the C key are 
further enciphered by the T key 
[0021] The T key is an algorithm which has been 
predetermined between equipment on the data receiv- 
ing side and equipment on the data sending side and 

35 formed on the basis of the MID code. That is, when data 
of contents is moved between the equipment, the MID 
code on the receiving side is transmitted from the equip- 
ment on the receiving side to the equipment on the 
sending side. The T key is formed on the basis of the 

40 transmitted MID code in the equipment on the sending 
side. In the equipment on the receiving side, the T key is 
formed on the basis of its own MID code by a similar 
algorithm. 

45 (5) DA code 

[0022] It is a dynamic authenticating code which is 
formed in an enciphering/decoding chip and is added to 
the C key. The DA code is formed by using, for example, 

so a random number, time code, and the like. If the DA 
code is added, by temporarily shunting the C key, it 
becomes impossible to illegally use the contents. By 
using the DA code, it is possible to permit/inhibit the use 
for a predetermined period of time or lend or borrow the 

55 contents. 
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2. System using the M key 

[0023] Fig. 1 shows an example of a data distribut- 
ing system to which the invention is applied. In this 
example, an enciphering key called an M key is intra- s 
duced, thereby enabling data to be used only by specific 
terminal equipment 

[0024] In Fig. 1 , a contents server 1 is connected to 
a user machine 2 through a transmission path 3. 
Although only one user machine 2 as terminal equip- jo 
ment which is connected to the contents server 1 
through the transmission path 3 is shown in Fig. 1 in 
order to simplify the description, a plurality of user 
machines 2 are actually connected to the server 1 via 
the transmission path 3. A contents database 1 1 is pro- is 
vided for the contents server 1 . Data of contents pre- 
sented by the contents server 1 has been stored in the 
contents database 1 1 . 

[0025] The data of contents to be stored into the 
contents database 11 is inputted and supplied from a 20 
contents input terminal 13. For example, in case of a 
server for performing a music distributing service, music 
data is supplied from the contents input terminal 13. 
The music data is supplied to an encoder 1 4. The music 
data is compression encoded by the encoder 14 on the 25 
basis of a modified DCT (Modified Discrete Transform), 
namely, what is called ATRAC (Adaptive Transform 
Acoustic Coding) disclosed in, for example, JP-A-3- 
139923, JP-A-3-1 39922, or the like. The compressed 
music data is stored in the contents database 11. 30 
[0026] A code and key database 12 constructed by 
an RAM and a hard disk drive is provided for the con- 
tents server 1. The MID codes and the M keys of the 
user machines 2 serving as all equipment connected to 
the contents server 1 are stored in the code and key 35 
database 12. The MID code is information peculiar to 
each user machine in order to identify each user 
machine 2. The M key is the enciphering key peculiar to 
each user machine. The MID code and M key are allo- 
cated to each user machine 2, for example, at the time 40 
of shipment of the equipment from the factory When the 
MID code and the M key are allocated to each user 
machine 2 at the time of shipment from the factory, data 
to be stored in the code and key database 1 2 is formed 
on the basis of the list of the MID code and M key alio- 45 
cated to each equipment. 

[0027] The whole operation of the contents server 1 
is managed by a server processing manager 1 6. A com- 
munication control of the contents server 1 is managed 
by a communication manager 15. The data from the so 
contents server 1 is enciphered by an enciphering cir- 
cuit 17. The encipherment at that time is performed on 
the basis of the M key retrieved from the code and key 
database 12 on the basis of the MID code transmitted 
from the user machine 2. 55 
[0028] On the other hand, an enciphering/decoding 
processing unit 21 is provided for the user machine 2 as 
terminal equipment. The enciphering/decoding 



processing unit 21 is constructed by an exclusive-use IC 
for performing an enciphering process of data and a 
decoding process of the encryption. An MID code and 
an M key which are peculiar to the equipment are stored 
in the enciphering/decoding processing unit 21 at the 
time of shipment from the factory. 
[0029] Fig. 2 shows a construction of the encipher- 
ing/decoding processing unit 21. The encipher- 
ing/decoding processing unit 21 comprises: an M key 
holder 51 ; an MID code holder 52; an M key decoding 
circuit 53; and a controller 54. An M key as enciphering 
information peculiar to each equipment is stored in the 
M key holder 51 at the time of shipment from the factory. 
An MID code as identification information peculiar to 
each equipment is stored in the MID code holder 52 at 
the time of shipment from the factory The controller 54 
controls the operation of the enciphering/decoding 
processing unit 21. 

[0030] A command which is transmitted from a 
machine manager, which will be described hereinlater, 
is supplied to a command terminal CMD of the control- 
ler 54. The operation of the enciphering/decoding 
processing unit 21 is set on the basis of the command. 
The data of the contents enciphered by the M key is 
supplied to the M key decoding circuit 53 through an 
input terminal DATAJN. The M key is supplied from the 
M key holder 51 to the M key decoding circuit 53. The M 
key decoding circuit 53 deciphers the encryption of the 
data of contents supplied from the input terminal 
DATAJN. Output data of the M key decoding circuit 53 
is generated from a data output terminal DATA_OUT A 
code output terminal MID_OUT is led out from the MID 
code holder 52. An MID code is outputted from the code 
output terminal MID_OUT 

[0031] As shown in Fig. 2, the enciphering/decod- 
ing process is performed by the enciphering/decoding 
processing unit 21 constructed by an IC of one chip. 
The M keys and MID codes have been stored in the 
enciphering/decoding processing unit 21. Therefore, it 
is impossible from the outside to solve how the enci- 
phering process was performed in the encipher- 
ing/decoding processing unit 21 and what is the 
enciphering key. 

[0032] In Fig. 1 , an input as a result operated by the 
user is supplied from an input unit 22 to the user 
machine 2. The input from the input unit 22 is supplied 
to a machine processing manager 24 through a user 
interface 23. 

[0033] The machine processing manager 24 is con- 
structed by a microcomputer or the like and performs 
the whole process of the user machine 2. When receiv- 
ing the input to obtain the contents of the contents 
server 1 from the input unit 22, the machine processing 
manager 24 supplies a command to the encipher- 
ing/decoding processing unit 21 and performs the oper- 
ation for inquiring the MID code. When the command to 
inquire the MID code is supplied, the encipher- 
ing/decoding processing unit 21 generates the MID 
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code stored in the MID code holder 52 (Fig. 2) to the 
manager 24 in response to the supplied command to 
inquire the MID. 

[0034] When the MID code is received from the 
enciphering/decoding processing unit 21, the machine s 
processing manager 24 transmits a distributing request, 
the MID code, and accounting information to a commu- 
nication manager 25. The distributing request. MID 
code, and accounting information are transmitted from 
the communication manager 25 of the user machine 2 
to the communication manager 15 of the contents 
server 1 via the transmission path 3. 
[0035] When a distribution service of the data of the 
contents from the contents server 1 is received, a card 
26 is loaded. Balance information of the card 26 is sent 
to the machine processing manager 24 through a card 
reader/Writer 27. When the distribution of the contents is 
executed, the machine processing manager 24 gener- 
ates a drawing instruction or a reducing instruction to 
the card 26 via the card reader/writer 27, and the cost 
corresponding to the distribution of the contents is 
deducted from the card 26. In this manner, payment of 
the cost for the distribution of the contents is performed 
to a company which distributed the contents. At that 
time, it is also possible to discriminate whether he is a 
legal user or not and whether the user has certainly per- 
formed the charging or not and, thereafter, output the M 
key corresponding to the MID code transmitted from the 
user machine 2. 

[0036] On the contents server 1 side, the server 
processing manager 16 constructed by a microcom- 
puter or the like controls the whole processes of the 
server 1. When the communication manager 15 
receives the distributing request, MID code, and 
accounting information which are transmitted from the 
user machine 2, the received distributing request, MID 
code, and accounting information are sent to the server 
processing manager 1 6. 

[0037] When the MID code transmitted from the 
user machine 2 is received, the server processing man- 
ager 16 sends the MID code to the code and key data- 
base 12 and supplies the command to inquire the M key 
of the user machine corresponding to the MID code 
transmitted from the user machine 2 to the database 1 2. 
As mentioned above, the MID code of each equipment 
connected to the server 1 and the information of the M 
key corresponding to the MID code have previously 
been stored in the code and key database 1 2. When the 
MID code transmitted from the manager 16 is received, 
the code and key database 12 identifies the user 
machine 2 from the transmitted MID code and outputs 
the M key corresponding to the user machine 2 which 
transmitted the MID code. The M key corresponding to 
the transmitted MID code is sent to the M key encipher- 
ing circuit 17. An enciphering key is set to the M key 
enciphering circuit 1 7 on the basis of the M key trans- 
mitted from the database 12. 

[0038] When the distributing request from the user 



machine 2 is received, the server processing manager 

16 sends a command indicative of the distributing 
instruction of the requested contents to the contents 
database 1 1 . When the distributing instruction from the 
user machine 2 is received, the contents database 1 1 
reads out the data of the contents corresponding to the 
transmitted distributing instruction. The data of the con- 
tents read out from the database 1 1 is sent to the M key 
enciphering circuit 1 7. 

[0039] The M key corresponding to the MID code of 
the equipment of the user machine 2 which requested 
the data has been set in the M key enciphering circuit 1 7 
from the code and key database 12. The data of the 
contents which is transmitted from the contents data- 
base 1 1 is enciphered by the M key enciphering circuit 

17 by the M key corresponding to the MID code of the 
user machine 2 mentioned above. The data of the con- 
tents enciphered by the M key is transmitted from the 
communication manager 15 of the contents server 1 to 
the communication manager 25 of the user machine 2 
through the transmission path 3. The data of the con- 
tents is accumulated in a storage device 20 in the user 
machine 2. In this case, a wire or radio communication 
network such as an ISDN (Integrated Services Digital 
Network) or the like can be used as a transmission path 
3. 

[0040] As mentioned above, when the distribution 
of the contents is requested from the user machine 2 to 
the contents server 1, the MID code peculiar to the 
equipment of the user machine 2 is sent from the user 
machine 2 to the contents server 1 . The code and key 
database 1 2 is provided for the contents server 1 . The 
M key which corresponds to the MID code of the user 
machine 2 and was sent from the user machine 2 is 
called from the code and key database 12. The data of 
the contents read out from the database 11 is enci- 
phered by the M key. The data of the contents enci- 
phered by the M key that is peculiar to the user machine 
2 is sent to the user machine 2. The data of the contents 
which was enciphered is accumulated in the storage 
device 20 of the user machine 2. Since the data of the 
contents stored in the storage device 20 has been enci- 
phered by the M key peculiar to the equipment of the 
user machine 2, the distributed data of the contents 
cannot be decoded by equipment other than the user 
machine 2 which requested the distribution of the con- 
tents. Thus, the copyright of the contents which is dis- 
tributed from the server 1 to the user machine 2 can be 
protected. 

[0041] That is, in case of decoding the data of the 
contents stored in the storage device 20, the read-out 
data of the contents is supplied from the storage device 
20 to the data input terminal DATAJN of the encipher- 
ing/decoding processing unit 21 in Fig. 2. As shown in 
Fig. 2, the M key peculiar to the equipment of the user 
machine 2 has been accumulated in the M key holder 
51 of the enciphering/decoding processing unit 21. 
Since the data of the contents sent from the contents 
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server 1 has been enciphered by the M key correspond- 
ing to the MID code in the MID code holder 52, the M 
key set in the M key enciphering circuit 1 7 on the con- 
tents server 1 side is similar to the M key stored in the M 
key holder 51 of the user machine 2. Therefore, the data 5 
of the contents which was read out from the storage 
device 20 and enciphered by the M key can be decoded 
by the enciphering/decoding processing unit 21 . 
[0042] On the other hand, it is now assumed that 
the data of the contents stored in the storage device 20 
was copied to a user machine or equipment other than 
the user machine 2. The data of the contents stored in 
the storage device 20 has been enciphered by the M 
key peculiar to the equipment of the user machine 2. 
The enciphering/decoding processing unit 21 of the 
other equipment does not have the same M key as that 
of the equipment of the user machine 2 serving as a 
copying source. Therefore, even if the data of the con- 
tents stored in the storage device 20 is copied into the 
equipment other than the user machine 2 in which the 
data of the contents transmitted from the server 1 has 
been stored by sending a distributing request to the 
inherent user machine 2, namely, server 1 , the encryp- 
tion of the data of the contents cannot be decoded in the 
equipment serving as a copying source. 

3. System using the C key 

[0043] By introducing the M key shown in Figs. 1 
and 2, the data of the contents can be used by only the 
specific equipment. However, if only the M key is used, 
the data of the contents cannot be moved at all from the 
user machine in which the data of the contents distrib- 
uted from the server 1 has been stored to the other user 
machine or equipment. Although there is considered a 
case where the right of the author is not protected if the 
data of the contents is copied as much as possible, if 
the data of the contents was merely moved, since this 
means that the equipment which uses the data of the 
contents is merely shifted to the other equipment, no 
problem occurs. As shown in Figs. 1 and 2 mentioned 
above, according to the apparatus and method using 
only the M key, it is impossible to cope with the shift from 
certain equipment of the data of the contents to the 
other equipment, namely, from a certain user machine 
to the other user machine as mentioned above. There is 
considered a situation that an error occurs in the data of 
the contents once stored in the user machine or the 
download of such data fails. In such a case, if the legal 
user performed the legal charging and received the dis- 
tribution of the data of the contents, it is desired to redis- 
tribute the data of the contents. The contents include toll 
contents and toll-free contents and if only the M key is 
used, it is impossible to perform the proper charging in 
accordance with the kind of contents. 
[0044] As mentioned above, by introducing the M 
key, the protection of the data of the contents for each 
user machine as each equipment as a unit and the pro- 



tection for the copy of the illegal contents data can be 
accomplished. However, if only the M key is used, it is 
insufficient to protect the data of each contents and per- 
form the proper charging. Therefore, an example in 
which a C key to encipher every contents is introduced 
will now be described with reference to Fig. 3 and sub- 
sequent drawings. 

[0045] Fig. 3 shows an example of a data distribut- 
ing system introducing the C key. The C key has a role 
to protect data every contents. 

[0046] In the data distributing system introducing 
the C key, as an enciphering/decoding processing unit 
121 on the side of a user machine 1 02, in a manner sim- 
ilar to the enciphering/decoding processing unit 21 
shown in Fig. 2, as shown in Fig. 4. an M key holder 
151 , an MID code holder 152, an M key decoding circuit 
153, and a controller 154 are provided. Further, a C key 
fetching circuit 1 55 and a C key decoding circuit 1 56 are 
provided for the processing unit 121. The operations of 
the M key holder 151. MID code holder 152, M key 
decoding circuit 153, and controller 154 are similar to 
those of the enciphering/decoding processing unit 21 in 
the data distributing system using only the M key men- 
tioned above. The M key serving as enciphering infor- 
mation that is peculiar to the equipment of each user 
machine 102 is stored in the M key holder 151 at the 
time of shipment from the factory. The MID code serving 
as identification information that is peculiar to the equip- 
ment of each user machine 102 is stored in the MED 
code holder 152 at the time of shipment from the fac- 
tory. The controller 154 controls the operation of the 
enciphering/decoding processing unit 121. The C key 
fetching circuit 155 holds the C key decoded by decod- 
ing the M key. The C key decoding circuit 156 performs 
the decoding process by the C key. 
[0047] A command is supplied to the controller 1 54 
from a machine processing manager, which will be 
explained hereinlater, through the command terminal 
CMD. The operation of the enciphering/decoding 
processing unit 1 21 is set on the basis of the command 
which is supplied from the command terminal CMD. The 
data which was enciphered by the C key and, further, 
enciphered by the M key is supplied from the input ter- 
minal DATAJN to the M key decoding circuit 153, and 
the C key enciphered by the M key is also supplied 
thereto from an input terminal KEYJN. The M key is 
supplied from the M key holder 151 to the M key decod- 
ing circuit 153. 

[0048] If the enciphering key of the input data, 
namely, the M key which enciphered the data which is 
supplied from the terminal DATAJN coincides with the 
M key from the M key holder 151, deciphering can be 
performed by the M key decoding circuit 1 53. The C key 
in which the encryption by the M key was deciphered 
and the data enciphered by the C key are outputted 
from the M key decoding circuit 153. The C key is held 
in the C key fetching circuit 155. The data enciphered by 
the C key is supplied to the C key decoding circuit 156. 
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[0049] In the C key decoding circuit 1 56, the decod- 
ing process based on the C Key is performed and the 
data enciphered by the C key is decoded. Output data 
from the C key decoding circuit 156 is outputted from 
the data output terminal DATA_OUT. The code output 5 
terminal MID__OUT is led out from the MID code holder 
152. The MID code is outputted from the code output 
terminal MID_OUT. To transfer the data enciphered by 
the C key, an output terminal KEY_OUT of the C key 
and an output terminal DATA_T of the data of the con- 
tents enciphered by the C key are provided for the enci- 
phering/decoding processing unit 121. 
[0050] As mentioned above, in the data distributing 
system introducing the C key. a processing unit with a 
construction as shown in Fig. 4 is used as an encipher- 
ing/decoding processing unit 121 on the user machine 
102 side in Fig. 3. As shown in Fig. 3, a C key forming 
unit 1 18 to generate the C key and a C key enciphering 
circuit 119 for enciphering the data of the contents by 
using the C key formed by the C key forming unit 118 
are provided on the side of a contents server 101. The 
other construction is similar to that of the contents 
server 1 shown in Fig. 1 mentioned above. 
[0051 ] In the foregoing data distributing system of 
only the M key, the data from the contents input terminal 
13 is compression encoded by the encoder 14 and 
accumulated as it is in the contents database 1 1 . How- 
ever, in the example shown in Fig. 3, the data from a 
contents input terminal 1 13 is compression encoded in 
an encoder 114 and, thereafter, sent to the C key enci- 
phering circuit 119, enciphered by the C key encipher- 
ing circuit 1 19 by the C key from the C key forming unit 
118, and accumulated into a contents database 111. 
The C key used in the enciphering circuit 119 in this 
instance is stored into the contents database 111. 
[0052] When the user wants to receive the distribu- 
tion of the contents of the contents server 101 , the user 
operates an input unit 122 of the user machine 102 and 
inputs a contents distributing instruction to a machine 
processing manager 124 through a user interface 123. 
[0053] When an instruction to get the contents in 
the contents server 101 is received from the input unit 
122, the machine processing manager 124 gives a 
command to the enciphering/decoding processing unit 
121 and inquires the MID code. When the command 
transmitted from the machine processing manager 124 
is inputted, the enciphering/decoding processing unit 
121 generates the MID code in response to the com- 
mand. 

[0054] When the MID code is received from the 
enciphering/decoding processing unit 121, the machine 
processing manager 124 sends the distributing request, 
MID code, and accounting information to a communica- 
tion manager 125. Each information of the distributing 
request, MID code, and accounting information is sent 
from the communication manager 125 to a communica- 
tion manager 1 15 of the contents server 101 through a 
transmission path 103. 



[0055] When the MID code from the user machine 
102 is supplied, the communication manager 1 15 sends 
the supplied MID code to a server processing manager 
116. The server processing manager 116 sends the 
MID code transmitted from the user machine 102 to a 
code and key database 1 12 and transmits a command 
to inquire the M key corresponding to the transmitted 
MID code. The code and key database 112 generates 
the M key of the equipment corresponding to the MID 
code transmitted from the user machine 102. The M key 
outputted from the code and key database 1 12 is sup- 
plied to an M key enciphering circuit 1 1 7. The M key cor- 
responding to the MID code transmitted from the user 
machine 102 is set into the M key enciphering circuit 
117. 

[0056] When the distributing request from the user 
machine 102 is received, the server processing man- 
ager 116 sends the command to distribute the 
requested contents to the contents database 111. The 
contents database 1 1 1 reads out the data of the con- 
tents corresponding to the distributing request of the 
user machine 102 on the basis of the information from 
the server processing manager 116. 
[0057] As mentioned above, the data in the con- 
tents database 1 1 1 has been enciphered by the C key. 
Therefore, the contents data enciphered by the C key is 
further enciphered by the M key by the M key encipher- 
ing circuit 117. The C key in this instance is read out 
from the contents database 1 1 1 and enciphered by the 
M key by the M key enciphering circuit 117. 
[0058] As mentioned above, the contents data 
which was enciphered by the C key and further enci- 
phered by the M key and the C key enciphered by the M 
key are sent from the communication manager 115 of 
the contents server 101 to the communication manager 
125 of the user machine 102 through the transmission 
path 1 03. The contents data which was transmitted from 
the server 101 through the transmission path 103 and 
enciphered by the C key and, further, enciphered by the 
M key and the C key enciphered by the M key are stored 
into a storage device 120 of the user machine 102. 
[0059] As mentioned above, the contents data 
stored in the contents database 111 has been enci- 
phered by the C key. When the data is transmitted from 
the contents server 101 to the user machine 102, the 
data enciphered by the C key is further enciphered by 
the M key. Although the C key is necessary to decode 
the data of the contents enciphered by the C key, the C 
key is enciphered by the M key and supplied from the 
contents server 101 to the user machine 102. 
[0060] in case of decoding the data of the contents 
stored in the storage device 120, the data of the con- 
tents read out from the storage device 120 is supplied to 
a data input terminal DATAJN of the encipher- 
ing/decoding processing unit 121 in Fig. 4. The C key 
enciphered by the M key is read out from the storage 
device 120 and supplied to the key input terminal 
KEYJN of the enciphering/decoding processing unit 
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121. 

[0061] As shown in Fig. 4. the M key peculiar to the 
equipment of the user machine 102 has been stored in 
the M key holder 151 of the enciphering/decoding 
processing unit 121. The data of the contents sent from 
the contents server 101 has been enciphered by the M 
key corresponding to the MID code in the MID code 
holder 152. The M key set in the M key enciphering cir- 
cuit 1 1 7 on the contents server 101 side is the same as 
that stored in the M key holder 151. Therefore, in the 
contents data which was enciphered by the C key and, 
further, enciphered by the M key and is supplied from 
the storage device 120, the enciphered portion based 
on the M key can be decoded by the M key decoding cir- 
cuit 153. 

[0062] Similarly, the C key which was enciphered by 
the M key and is supplied from the storage device 120 is 
decoded by the M key decoding circuit 153. 
[0063] Therefore, the data enciphered by the C key 
and the C key are outputted from the M key decoding 
circuit 153. The C key is supplied to the C key fetching 
circuit 155. The data enciphered by the C key is sup- 
plied to the C key decoding circuit 156. The encryption 
by the C key is deciphered by the C key decoding circuit 
156 and the data of the contents is decoded. The 
decoded data is outputted from the data output terminal 
DATA_OUT. The C key which is outputted from the C 
key fetching circuit 155 is outputted from the key output 
terminal KEY_OUT. 

[0064] By enciphering the contents data by the C 
key as mentioned above, when the contents data is 
used, the C key to decode it is certainly necessary. 
Since the data of the contents can be used only by the 
user machine or equipment on the user side having the 
C key, the C key can be used as a key showing the right 
such that the data of the contents can be used. 
[0065] That is, if the C key is sent from a certain 
user machine as one terminal equipment to the other 
user machine as another terminal equipment, this 
means that the data of the contents and the right to use 
the data of the contents are sent. The contents data can 
be used by the terminal equipment on the other user 
side. After the C key was sent from one terminal equip- 
ment to the terminal equipment on the other user side 
as mentioned above, if the C key of the equipment is 
erased, even if the data of the contents remains in the 
equipment on the sending side, the encryption by the C 
key added to the contents data cannot be deciphered, 
so that the contents data cannot be used at all. In other 
words, it can be regarded that the contents data was 
transferred to the equipment on the other user side or 
the other user. 

[0066] There is a case where the legal user errone- 
ously erases the contents data or fails in download of 
the contents data. Even in this case, if the C key 
remains in the user machine 102. by allowing the con- 
tents data to be retransmitted from the server 101 and 
decoding the retransmitted contents data by using the 



remaining C key. the contents data can be used. By 
introducing the C key as mentioned above, the contents 
data can be moved or retransmitted as follows. The 
charging can be set by using the C key. 

5 [0067] The C key from the key output terminal KEY 
OUT of the enciphering/decoding processing unit 121 
and the data enciphered by the C key from the output 
terminal DATA_T of the data are transferred to the user 
machine as equipment on the partner side serving as a 

10 movement destination. When the data transfer is fin- 
ished, the C key stored in the C key fetching circuit 155 
and the C key stored in the storage device 120 are 
erased, so that the contents data is moved. With this 
method, the contents data can be used only by the 

is equipment on the partner side. At mis time, it is not 
always necessary to erase the contents data remaining 
in the storage device 120 of the user machine serving 
as a moving source side. This is because the contents 
data remaining in the storage device 120 of the user 

20 machine serving as a moving source has been enci- 
phered by the C key and, if the C key is erased, the con- 
tents data cannot be decoded, so that it cannot be used 
as contents data. 

[0068] On the contrary to the above case, even 
25 after the data of the contents in the storage device 120 
was erased, if the C key is stored, by allowing the con- 
tents data to be retransmitted from the server 101, the 
contents data can be again used. The retransmission of 
the contents data is performed by processes similar to 
30 those in the case of downloading the contents data 
mentioned above. At this time, whether the new con- 
tents data is distributed, namely, downloaded or not is 
discriminated by the C key and the charging is per- 
formed only in case of the new data. For example, the 
35 user machine 102 collates the transmitted C key by the 
contents database 111, thereby discriminating about 
the distribution of the new contents data by checking at 
which time the C key was formed by the C key forming 
unit 118. 

40 [0069] By using the C key, the charging according 
to the contents of the distribution of the contents data 
can be performed as mentioned above. For example, 
the C key can be added only to the toll contents data 
without adding the C key to the toll-free contents data. 

45 On the receiving side, namely, the user machine 102 
side, the machine processing manager 124 discrimi- 
nates whether the C key sent from the server 101 is a 
new key or not. The charging is performed only when it 
is the new C key. By this method, whether the contents 

so or the data of the contents to be taken out of the server 

101 is the toll contents or the toll data of the contents or 
not can be discriminated on the basis of the C key which 
is transmitted from the server 101 , so that the toll con- 
tents or the toll data of the contents can be protected. In 

55 case of the retransmission of the data of the contents 
mentioned above, the C key stored in the user machine 

102 and the C key which enciphered the received con- 
tents data are compared. From the result of this com- 
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parison, whether the charging is performed or not can 
be discriminated as mentioned above. Further, it is also 
possible to form a code from information (for example, 
ranking of the contents or the like) regarding the charg- 
ing, include the formed code into the C key. and change 5 
the fee for the same contents in accordance with the 
conditions. 

[0070] Fig. 5 is a flowchart showing an accounting 
process using the C key. A check is made to see if it has 
been outputted from the key output terminal KEY_OUT 
of the enciphering/decoding processing unit 121 of the 
user machine 102. that is. the C key has been received 
when the data distributed from the server 101 is fetched 
into the storage device 120 of the user machine 102, 
namely, at the time of downloading (step S1). If the C 
key is not received, the data of the contents distributed 
from the server 101 is determined to be the toll-free 
contents data, and the charging is not performed (step 
S2). If the C key is received, whether the C key has 
been stored in the storage device 120 or not is discrim- 
inated (step S3). In case of the retransmission of the 
contents, since the C key has been stored in the storage 
device 120, whether the received C key and the C key 
stored in the storage device 1 20 coincide or not is dis- 
criminated (step S4). When the received C key and the 
C key stored in the storage device 120 coincide, since 
this means the retransmission of the data of the con- 
tents, the charging is not performed (step S2). 
[0071] When it is decided in step S3 that the C key 
transmitted from the server 101 is not stored in the stor- 
age device 120 or when it is determined in step S4 that 
the received C key and the C key stored in the storage 
device 120 do not coincide, information of the charging 
rank of the C key is obtained (step S5). The accounting 
process is performed in accordance with the information 
of the charging rank (step S6). As charging ranking 
information of the C key, for example, information show- 
ing the kind of data of the contents, quality of the data, 
or the like is considered. 

4. System using the T key 

[0072] As mentioned above, by introducing the C 
key into the data distributing system, the movement of 
the data of the contents between the user machine as 
certain equipment and the user machine as another 
equipment and the retransmission of the contents data 
can be performed. However, if only the C key is used, 
the C key is directly transmitted when the contents is 
moved to the equipment on the partner side serving as 
a movement destination. At this time, there is a possibil- 
ity that the C key leaks to the outside and the data of the 
contents cannot be protected. An example in which the 
T key is introduced into the data distributing system in 
order to protect the data of the contents at the time of 
data movement will now be described hereinbelow. 
[0073] Fig. 6 shows an example of the data distrib- 
uting system introducing the T key. In Fig. 6, a user 



machine 202A on the sending side of the data is con- 
structed by a storage device 220A, an encipher- 
ing/decoding processing unit 221 A, an input unit 222A, 
a user interface 223 A, a machine processing manager 
224A, a communication manager 225A, and a card 
reader/writer 227 A in a manner similar to the user 
machine 102 of the data distributing system shown in 
Fig. 3 mentioned above. A card 226A similar to a card 
126 which is used in the data distributing system shown 
in Fig. 3 mentioned above is loaded into the card 
reader/writer 227A. 

[0074] Like a user machine 202A mentioned above, 
a user machine 202 B on the receiving side of the data is 
constructed by a storage device 220B, an encipher- 
ing/decoding processing unit 221 B, an input unit 222B, 
a user interface 223 B, a machine processing manager 
224B, a communication manager 225B, and a card 
reader/writer 227B in a manner similar to the user 
machine 102 of the data distributing system shown in 
Fig. 3 mentioned above. A card 226B similar to the fore- 
going card 226A is loaded into the card reader/writer 
227B. 

[0075] In the data transfer system introducing the T 
key, processing units as shown in Fig. 7 are used as 
enciphering/decoding processing units 221 A and 221 B. 
As shown in Fig. 7, an M key holder 251. an MID code 
holder 252, an M key decoding circuit 253, a controller 
254. a C key fetching circuit 255, and a C key decoding 
circuit 256 are provided in each of the encipher- 
ing/decoding processing units 221 A and 221 B. A T key 
enciphering circuit 257, T key forming circuits 258 and 
259, a T key decoding circuit 260, and an M key enci- 
phering circuit 261 are also provided. 
[0076] The operations of the M key holder 251, MID 
code holder 252, M key decoding circuit 253, and con- 
troller 254 are similar to those of the enciphering/decod- 
ing processing units 21 and 121 of the user machines 2 
and 102 in the foregoing data distributing system. The 
M key as enciphering information that is peculiar to the 
equipment of each user machine is stored in the M key 
holder 251 at the time of shipment from the factory. The 
MID code as identification information that is peculiar to 
each equipment is stored in the MID code holder 252 at 
the time of shipment from the factory. The controller 254 
controls the operations of the enciphering/decoding 
processing units 221 A and 221 B. The C key fetching cir- 
cuit 255 holds the C key decoded by the decryption of 
the M key. The C key decoding circuit 256 performs the 
decoding process of the C key. 

[0077] The T key enciphering circuit 257 enciphers 
the data which is moved from the user machine 202 A 
serving as certain equipment to the other user machine 
202 B serving as another equipment by the T key from 
the T key forming circuit 258. The T key decoding circuit 
260 decodes the moved data by the T key from the T 
key forming circuit 259. Each of the T key forming cir- 
cuits 258 and 259 forms the T key on the basis of the 
MID code. 
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[0078] Figs. 8A and 8B are diagrams for explaining 
the operations of the enciphering/decoding processing 
units 221 A and 221 B when the data of the contents is 
moved from the user machine 202A to the user machine 
202B. 5 
[0079] When the data of the contents is moved from 
the user machine 202A to the user machine 202B, a 
transferring request of the MID code is sent from the 
user machine 202A on the sending side of the data to 
the user machine 202B on the partner side. 10 
[0080] In the user machine 202B on the partner 
side, when a transmitting request of the MID code is 
received, the MID code is called from an MID code 
holder 252B of the enciphering/decoding processing 
unit 221 B of the user machine 202B, the MID code read is 
out from the MID code holder 252B is outputted from the 
code output terminal MID_OUT, and the MID code is 
transmitted from the user machine 202 B to the user 
machine 202A. 

[0081] In the user machine 202A on the data send- 20 
ing side, when the MID code transmitted from the user 
machine 202 B on the partner side is received from a 
code input terminal MlD_IN, the received MID code is 
supplied to a T key forming circuit 258A. The T key 
forming circuit 258A forms the T key on the basis of the 25 
MID code sent from the user machine 202B on the part- 
ner side. The T key formed by the T key forming circuit 
258A is supplied to a T key enciphering circuit 257A. 
[0082] The user machine 202 A receives the MID 
code from the user machine 202B. When the T key is 30 
formed on the basis of the MID code received in the T 
key forming circuit 258A and supplied to the T key enci- 
phering circuit 257A, the operation to transmit the con- 
tents data and the C key from the user machine 202A to 
the user machine 202B is started. 35 
[0083] The contents data which was enciphered by 
the C key and, further, enciphered by the M key and the 
C key enciphered by the M key have been stored in the 
storage device 220A of the user machine 202A. There- 
fore, when the contents data and the C key are transmit- 40 
ted from the user machine 202A to the user machine 
202B, the contents data which was enciphered by the C 
key and, further, enciphered by the M key and the C key 
enciphered by the M key are supplied from the storage 
device 220A of the user machine 202 A to the key input as 
terminal KEYJN and data input terminal DATA_IN of 
the enciphering/decoding processing unit 221 A. 
[0084] The M key is supplied from an M key holder 
251 A to an M key decoding circuit 253 A. In the M key 
decoding circuit 253A, the decoding process of the so 
encryption performed on the basis of the M key is exe- 
cuted by the M key from the M key holder 251 A. The 
decoded C key and the contents data enciphered by the 
C key are outputted from the M key decoding circuit 
253A. The C key which is outputted from the decoding ss 
circuit 253A is supplied to a C key fetching circuit 255A 
and supplied to the T key enciphering circuit 257A. The 
contents data enciphered by the C key which is output- 



20 

ted from the decoding circuit 253 A is supplied to a C key 
decoding circuit 256A and supplied to the T key enci- 
phering circuit 257 A. 

[0085] In the C key decoding circuit 256A, a decod- 
ing process of the data of the contents enciphered by 
the C key which is supplied from the decoding circuit 
253A is performed and a decoding process of the 
encryption based on the C key performed to the data of 
the contents is performed. The decoded contents data 
is outputted from the data output terminal DATA_OUT. 
[0086] The T key formed in the T key forming circuit 
258A on the basis of the MID code of the user machine 
202B is set into the T key enciphering circuit 257A. The 
C key and the contents data enciphered by the C key 
which are outputted from the M key decoding circuit 
253A are enciphered by the T key formed on the basis 
of the MID code of the user machine 202B on the part- 
ner side by the T key enciphering circuit 257 A. There- 
fore, the C key enciphered by the T key and the contents 
data which was enciphered by the C key and, further, 
enciphered by the T key are outputted from the T key 
enciphering circuit 257A. 

[0087] The C key enciphered by the T key and the 
contents data which was enciphered by the C key and, 
further, enciphered by the T key are outputted from a 
key output terminal TKEY_OUT and a data output ter- 
minal TDATA_OUT, sent to the user machine 202B on 
the partner side, inputted to a key input terminal 
RCKEYJN and a data input terminal RDATAJN of the 
enciphering/decoding processing unit 221 B of the user 
machine 202B on the partner side, and supplied to a T 
key decoding circuit 260 B. At a point when the transmis- 
sion of the C key enciphered by the T key and the con- 
tents data enciphered by the C key and the T key to the 
user machine 202 B is completed, the C key stored in 
the storage device 220A of the user machine 202A is 
deleted and the reading of the contents data from the 
storage device is inhibited. 

[0088] The T key is supplied from a T key forming 
circuit 259B to the T key decoding circuit 260B. The T 
key is formed in the T key forming circuit 259B on the 
basis of the MID code from the MID code holder 252B. 
[0089] In the user machine 202A on the sending 
side, the MID code which is transmitted from the user 
machine 202 B is received and the T key is formed in the 
T key forming circuit 258A on the basis of the received 
MID code. In the T key decoding circuit 260 B of the user 
machine 202B on the receiving side, the T key is formed 
on the basis of the MID code from the MID code holder 
252B. The same MID code is sent to the T key forming 
circuits 258A and 259B. Therefore, the contents data 
and C key which had been enciphered by the T key and 
sent from the user machine 202 A can be decoded by 
the T key decoding circuit 260B of the user machine 
202B 

[0090] The C key and the data of the contents enci- 
phered by the C key are outputted from the T key 
decoding circuit 260 B. The C key and the data of the 
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contents enciphered by the C key are supplied to an M 
key enciphering circuit 261 B. 

[0091] The M key peculiar to the equipment of the 
user machine 202B is sent from an M key holder 251 B 
to the M key enciphering circuit 261 B. The C key and s 
the data of the contents enciphered by the C key are 
enciphered on the basis of the M key read out from the 
M key holder 251 B. Therefore, the C key enciphered by 
the M key and the data of the contents which was enci- 
phered by the C key and, further, enciphered by the M 
key are outputted from the M key enciphering circuit 
261 B. The C key enciphered by the M key and the data 
of the contents which was enciphered by the C key and, 
further, enciphered by the M key which are outputted 
from the M key enciphering circuit 261 B are outputted 
from a key output terminal RKEY_OUT and a data out- 
put terminal RDATA_OUT, respectively, and stored into 
the storage device 220 B of the user machine 202 B. 
[0092] As mentioned above, by using the T key, 
when the data is moved from the user machine 202 A to 
the user machine 202 B, the C key and the contents data 
enciphered by the C key which are transmitted from the 
user machine 202A to the user machine 202B are fur- 
ther enciphered by the T key. Therefore, the C key as an 
enciphering key does not leak to the outside and the 
data of the contents can be protected. 

5. System using a DA code 

[0093] As mentioned above, by introducing the T 
key to the data distributing system, when the data is 
moved between the user machine serving as certain 
equipment and the user machine serving as another 
equipment, the data can be protected. However, as 
mentioned above, even if the T key is introduced, the 
data can be moved in the same equipment. For exam- 
ple, after the C key was temporarily stored in another 
location in the same user machine, for example, in 
another storing unit, if the data of the contents is moved 
and, thereafter, the C key is returned to the original loca- 
tion, although the C key is erased due to the movement 
of the contents data, since the C key has separately 
been stored in another location, the contents data is ille- 
gally copied by using the stored C key. 
[0094] Therefore, a method whereby a code (called 
a DA code) which dynamically changes with the elapse 
of time is added to the C key and an element which 
changes with respect to time is provided for the C key is 
considered. A data distributing system using the C key 
having the element which changes with respect to time 
will now be described hereinbelow with reference to Fig. 
9 and subsequent drawings. 

[0095] That is, in Fig. 9, in a manner similar to the 
foregoing user machine 102 shown in Fig. 3 except for a 
C key storing memory 330, a user machine 302 is con- 
structed by: a storage device 320; an encipher- 
ing/decoding processing unit 321; an input unit 322; a 
user interface 323; a machine processing manager 324; 



a communication manager 325; and a card 
reader/writer 327. A card 326 similar to the card 126 
shown in Fig. 3 mentioned above is loaded into the card 
reader/writer 327. 

[0096] In such a user machine 302, for example, it 
is now assumed that the C key is read out from the stor- 
age device 320, the C key read out from the storage 
device 320 is stored into the C key storing memory 330. 
and thereafter, data of contents in the storage device 
320 is moved to another user machine serving as 
another equipment. In this case, when the movement of 
the contents data is finished, although the C key in the 
storage device 320 is erased, since the C key has been 
shunted to the C key storing memory 330, the C key in 
the memory 330 is not erased. After that, by returning 
the C key from the C key storing memory 330 to the 
storage device 320, if the data of the contents remains 
in the storage device 320, the contents data which 
ought to have been moved to the other user machine 
can be decoded. Further, even if no contents data exists 
in the storage device 320, when there is the C key, the 
retransmission of the contents data can be requested 
from the contents server 1 as mentioned above. The 
contents data can be illegally used. 
[0097] In the present data distributing system, 
therefore, as shown in Fig. 10, a DA code which dynam- 
ically changes with the elapse of time is added to the C 
key. A time code or random numbers are used as a DA 
code. By adding the DA code to the C key as mentioned 
above, the illegal use of the contents data as mentioned 
above can be prevented. 

[0098] Fig. 1 1 shows a construction of the encipher- 
ing/decoding processing unit 321 to handle the C key to 
which the DA code shown in Fig. 10 was added. In a 
manner similar to the enciphering/decoding processing 
units 221 A and 22 1B shown in Fig. 7, the encipher- 
ing/decoding processing unit 321 has: an M key holder 
351 ; an MID code holder 352; an M key decoding circuit 
353; a controller 354; a C key fetching circuit 355; a C 
key decoding circuit 356; a T key enciphering circuit 
357; T key forming circuits 358 and 359; a T key decod- 
ing circuit 360; and an M key enciphering circuit 361. A 
DA code managing circuit 362 is also provided. 
[0099] The DA code managing circuit 362 manages 
the DA code which is added to the C key. That is, the DA 
code managing circuit 362 calls the C key from the stor- 
age device 320 every predetermined time. When the C 
key is called, the DA code of the C key is checked. If the 
DA code is correct, an updating process of the DA code 
is performed. 

[0100] The C key enciphered by the M key has 
been stored in the storage device 320. Therefore, the C 
key enciphered by the 14 key is first sent from the key 
input terminal KEYJN to the M key decoding circuit 353 
and a decoding process of the encryption performed on 
the basis of the M key is performed. The decoded C key 
is outputted from the M key decoding circuit 353. This C 
key is sent to the DA code managing circuit 362. 
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[0101] The DA code managing circuit 362 detects 
the DA code of the C key which is supplied from the 
decoding circuit 353 every predetermined time and dis- 
criminates whether the DA code which was correctly 
updated has been added to the C key or not. If the DA 5 
code added to the C key is a DA code which was cor- 
rectly updated, the updating of the DA code is per- 
formed. The C key in which the DA code was updated is 
supplied to the M key enciphering circuit 361 , the enci- 
phering process is again performed on the basis of the 
M key. and the enciphered C key is again stored into the 
storage device 320. In case of a time code of the DA 
code added to the C key, it is also possible to perform 
the updating of the DA code by discriminating whether 
the time code has changed in accordance with a prede- 
termined rule or not. It is also possible to discriminate it 
on the basis of a method which is used in step S13, 
which will be explained hereinlater. 
[0102] Fig. 12 is a flowchart showing processes of 
the DA code managing circuit 362. In Fig. 12, whether a 
predetermined time has elapsed or not is discriminated 
by, for example, a timer function of the controller 354 or 
DA code managing circuit 362 (step S11). When the 
predetermined time elapses, the C key is read out from 
the storage device 320 and decoded by the decoding 
circuit 353 and the DA code added to the decoded C key 
is detected (step S12). Whether the DA code read out 
from the storage device 320 is the DA code which was 
correctly updated or not is discriminated (step S13). 
The discrimination about whether the DA code has cor- 
rectly been updated or not in step S13 can be made by 
checking whether the DA code held in the encipher- 
ing/decoding processing unit 321 and the DA code read 
out from the storage device 320 coincide or not. If it is 
determined in step S1 3 that the DA code is the DA code 
which was correctly updated, this DA code is updated to 
the next DA code. The C key to which the updated DA 
code has been added is again subjected to an encipher- 
ing process on the basis of the M key by the M key enci- 
phering circuit 361 and returned to the storage device 
320 (step S14). 

[0103] If it is determined in step S13 that the 
detected DA code is not the DA code which was cor- 
rectly updated, the C key in the storage device 320 is 
erased or a code indicative of the illegal use is added to 
the C key and the use of the data of the contents corre- 
sponding to the C key which was determined that the 
DA code is not correctly updated is inhibited (step S15). 
[0104] As mentioned above, when the C key in the 
storage device 320 is normally handled, the DA code 
which is added to the C key is always updated every 
predetermined time by the DA code managing circuit 
362, and the C key to which the updated DA code was 
added is stored into the storage device 320. 
[0105] For example, in the case where the C key 
was stored in the C key storing memory 330 in Fig. 9, 
since the DA code of the C key stored in the C key stor- 
ing memory 330 is not updated as mentioned above, it 



is determined in the DA code managing circuit 362 that 
the DA code is not correct. Thus, it is possible to prevent 
a situation such that the C key is once stored in the 
memory 330 and the data of the contents is moved and 
the data of the contents is illegally used by using the C 
code stored in the memory 330 after the movement as 
mentioned above. 

[01 06] As mentioned above, by using the DA code 
which dynamically changes, the reproduction can be 
inhibited or permitted for a certain period of time. If it is 
used, the contents can be lent for a predetermined 
period of time or a trial period can be set in the use of 
the contents. 

[0107] Fig. 13 is a flowchart showing processes in 
case of setting such that data of contents can be repro- 
duced only for a predetermined period of time by using 
the C key having the DA code which dynamically 
changes as mentioned above. In the case shown in Fig. 
1 3, a time code is used as a DA code. Term information 
is further added to the DA code of the C key. 
[0108] In Fig. 13, whether a predetermined time 
has elapsed or not is discriminated (step S21) in a man- 
ner similar to step S1 1 mentioned above. When the pre- 
determined time elapses, the C key stored in the 
storage device 320 is called. The DA code added to the 
C key is detected (step S22) in a manner similar to step 
S12 mentioned above. Whether the DA code has cor- 
rectly been updated or not is discriminated (step S23). If 
it is determined in step S23 that the DA code has cor- 
rectly been updated, this DA code is updated to the next 
DA code by the DA code managing circuit 362 (step 

524) . The term information added to the updated DA 
code is compared with the term information showing a 
use term of the contents data and held in a DA code 
management code, thereby discriminating whether the 
term of the C key has expired the use term or not (step 

525) . rf the term of the C key does not expire the use 
term, the C key to which this updated DA code was 
added is returned to the storage device 320 (step S26). 
The processing routine is returned to step S21 . 

[01 09] If rt is decided in step S23 that the DA code 
called from the storage device 320 is not the DA code 
which was correctly updated, the C key is deleted from 
the storage device 320 or a code indicative of the illegal 
use is added to the C key, thereby disabling the use of 
the data of the contents corresponding to the C key 
which was decided that the DA code is not correctly 
updated (step S26). When it is determined in step S25 
that the term of the C key has expired the use term, step 
S26 follows. The C key is deleted from the storage 
device 320 or a code indicative of the illegal use is 
added to the C key, thereby disabling the use of the data 
of the contents corresponding to the C key which was 
decided that the term has expired the use term in a 
manner similar to the above. 

[01 10] As mentioned above, the reproduction of the 
data of the contents can be inhibited or permitted only 
for a certain period of time by using the DA code. Thus, 
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the user can reproduce the contents data by providing a 
trial period. Further, in the case where the contents data 
is moved from one user machine to the other user 
machine, if the C key of one user machine is set so as 
to inhibit the reproduction until a predetermined term by 5 
the DA code and the C key of the other user machine is 
set so that the data can be reproduced only for such a 
period of time, it is possible to control the system so as 
to lend the data of the contents from one machine to the 
other machine only for a predetermined period of time. 10 
[0111] According to the invention, the contents 
which is stored in the contents server has been enci- 
phered by the C key. As mentioned above, by providing 
the C key, the contents can be moved and the retrans- 
mission can be requested. By discriminating whether 75 
the same C key as the transmitted C key has been 
stored in the storage device or not, whether the retrans- 
mission is performed or not is discriminated and the 
proper charging can be performed, or by ranking the C 
key, the charging can be performed while the fee is 20 
changed every contents. 

[0112] According to the invention, the DA code 
which dynamically changes with the elapse of time is 
added to the C key. By adding such a DA code, a situa- 
tion that the C key is shunted and the contents is ille- 25 
gaily used can be prevented. By using the DA code 
which dynamically changes with the elapse of time, a 
limit can be provided for the use period of the contents 
or the contents can be lent or borrowed for a predeter- 
mined period. 30 

Industrial Applicability 

[0113] As mentioned above, the data distributing 
apparatus and the terminal apparatus for data distribu- 35 
tion according to the invention are suitable for use in, for 
example, the information distributing system compris- 
ing: the contents server in which a plurality of music 
data is accumulated; and a user machine to which 
desired contents is distributed from the contents a ecu- 40 
mulated in the contents server. 

1, 101... CONTENTS SERVER 

2, 102, 202A, 202B, 302... USER MACHINE 

20. 120. 220A. 220B, 320... STORAGE DEVICE 45 

21, 121, 221A, 221B, 321... ENCIPHER- 
ING/DECODING PROCESSING CHIP 

Claims 

50 

1 . A data distributing apparatus comprising: 

a first storing unit in which first identification 
data that is peculiar to equipment and second 
identification data corresponding to said first 55 
identification data have been stored; 
a first transmitting/receiving unit for transmitting 
distribution request data of data together with 



said first identification data read out from said 
first storing unit and receiving the transmitted 
data; 

a first data storing unit for storing the data 
received by said first transmitting/receiving 
unit; 

a first signal processing unit for performing a 
decoding process to the data read out from 
said first data storing unit on the basis of said 
second identification data stored in said first 
storing unit; 

a first control unit for performing an operation to 
allow the data received by said first transmit- 
ting/receiving unit to be stored into said first 
data storing unit and controlling the decoding 
processing operation by said first signal 
processing unit of the data read out from said 
first data storing unit; 

a second transmitting/receiving unit for receiv- 
ing said first identification data and said distri- 
bution request data which were transmitted 
from said first transmitting/receiving unit and 
transmitting the data; 

a second data storing unit in which a plurality of 
data is stored and which outputs data corre- 
sponding to said distribution request data; 
a second storing unit in which the second iden- 
tification data corresponding to said transmit- 
ted first identification data has been stored; 
a second signal processing unit for performing 
an enciphering process to the data outputted 
from said second data storing unit on the basis 
of the second identification data read out from 
said second storing unit; and 
a second control unit for performing a reading 
control of said second identification data from 
said second storing unit on the basis of said 
distribution request data and said first identifi- 
cation data which were transmitted and per- 
forming a reading control of the data from said 
second data storing unit on the basis of said 
distribution request data, 
wherein the data enciphered on the basis of 
said second identification data transmitted 
through said second transmitting/receiving unit 
is decoded by said first signal processing unit. 

2. A data distributing apparatus according to claim 1 , 
wherein accounting information is transmitted from 
said first transmitting/receiving unit to said second 
transmitting/receiving unit, and said second control 
unit controls the reading operation of said second 
identification data from said second storing unit on 
the basis of said transmitted accounting informa- 
tion. 

3. A data distributing apparatus according to claim 1 , 
further comprising enciphering processing means 
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for performing an enciphering process to the data 
which is written into said second data storing unit 
on the basis of said enciphering data, and wherein 
the data enciphered by said enciphering processing 
means is written into said second data storing unit s 
and when the data is read out from said second 
data storing unit on the basis of said distribution 
request data and transmitted from said second 
transmitting/receiving unit to said first transmit- 
ting/receiving unit, said enciphering data is enci- w 
phered by said second identification data by said 
second signal processing unit and transmitted 
together with the data read out from said second 
data storing unit. 

15 

4. A data distributing apparatus according to claim 3, 
wherein said first signal processing unit decodes 
the data transmitted from said second transmit- 
ting/receiving unit and said enciphering data by 
said second identification data stored in said first 20 
storing unit and performs a decoding process of an 
encryption performed by said enciphering data to 
the data decoded on the basis of the decoded enci- 
phering data. 

25 

5. A data distributing apparatus according to claim 3, 
wherein said first control unit performs an account- 
ing process on the basis of said enciphering data. 

6. A data distributing apparatus according to claim 4, 30 
wherein said enciphering data has a data portion 
which dynamically changes, and said first control 
unit discriminates said dynamically changing data 
portion, at every predetermined time, in said enci- 
phering data stored in said first data storing unit 35 
and transmitted together with the data from said 
second transmitting/receiving unit. 

7. A data distributing apparatus according to claim 6, 
wherein said first control unit controls the reading 40 
operation of the data stored in said first data storing 
unit on the basis of a discrimination result of said 
dynamically changing data portion. 

8. A data distributing apparatus according to claim 7, 45 
wherein said first control unit inhibits the reading 
operation of at least the data from said first data 
storing unit when the discrimination result of said 
dynamically changing data portion indicates that 
said enciphering data is not correct so 

9. A data distributing apparatus according to claim 4, 
wherein said enciphering data has a data portion 
which time-dependently changes, and said first 
control unit discriminates said time-dependently 55 
changing data portion, at every predetermined 
time, in said enciphering data stored in said first 
data storing unit and transmitted together with the 



data from said second transmitting/receiving unit. 

1 0. A data distributing apparatus according to claim 9, 
wherein said first control unit controls the reading 
operation of the data stored in said first data storing 
unit on the basis of a discrimination result of said 
time-dependently changing data portion. 

1 1 . A data distributing apparatus according to claim 1 0, 
wherein said first control unit inhibits the reading 
operation of at least the data from said first data 
storing unit when the discrimination result of said 
time-dependently changing data portion indicates 
that a predetermined time has elapsed. 

12. A data distributing apparatus according to claim 4, 
further comprising a signal processing unit for fur- 
ther performing an enciphering process to the data 
decoded by said first signal processing unit on the 
basis of first identification data of a destination to 
which the data is to be moved when the data stored 
in said first data storing unit is moved. 

1 3. A data distributing apparatus according to claim 1 2, 
wherein said first control unit deletes said encipher- 
ing data stored in said first data storing unit at a 
point when the movement of the data stored in said 
first data storing unit is finished. 

14. A data distributing apparatus comprising: 

at least one terminal equipment section having 
a first storing unit in which first identification 
data that is peculiar to equipment and second 
identification data corresponding to said first 
identification data have been stored, a first 
transmitting/receiving unit for transmitting dis- 
tribution request data of data together with said 
first identification data read out from said first 
storing unit and receiving the transmitted data, 
a first data storing unit for storing the data 
received by said first transmitting/receiving 
unit, a first signal processing unit for performing 
a decoding process to the data read out from 
said first data storing unit on the basis of said 
second identification data stored in said first 
storing unit, a first control unit for performing an 
operation to allow the data received by said first 
transmitting/receiving unit to be stored into said 
first data storing unit and controlling the decod- 
ing processing operation by said first signal 
processing unit of the data read out from said 
first data storing unit; and 
a server apparatus section having a second 
transmitting/receiving unit, connected to said 
terminal equipment section through a transmis- 
sion path, for receiving said first identification 
data and said distribution request data which 
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were transmitted from said first transmit- 
ting/receiving unit and transmitting the data, a 
second data storing unit in which a plurality of 
data is stored and which outputs data corre- 
sponding to said distribution request data, a 5 
second storing unit in which the second identi- 
fication data corresponding to said transmitted 
first identification data has been stored, a sec- 
ond signal processing unit for performing an 
enciphering process to the data outputted from w 
said second data storing unit on the basis of 
the second identification data read out from 
said second storing unit, and a second control 
unit for performing a reading control of said 
second identification data from said second 15 
storing unit on the basis of said distribution 
request data and said first identification data 
which were transmitted and performing a read- 
ing control of the data from said second data 
storing unit on the basis of said distribution 20 
request data, 

wherein the data enciphered on the basis of 
said second identification data transmitted 
through said second transmitting/receiving unit 
is decoded by said first signal processing unit. 25 



1 5. A data distributing apparatus according to claim 14, 
wherein accounting information is transmitted from 
said first transmitting/receiving unit to said second 
transmitting/receiving unit, and said second control 30 
unit controls the reading operation of said second 
identification data from said second storing unit on 
the basis of said transmitted accounting informa- 
tion. 

35 

16. A data distributing apparatus according to claim 14, 
further comprising enciphering processing means 
for performing an enciphering process to the data 
which is written into said second data storing unit 

on the basis of said enciphering data, and wherein 40 
the data enciphered by said enciphering processing 
means is written into said second data storing unit, 
and when the data is read out from said second 
data storing unit on the basis of said distribution 
request data and transmitted from said second 45 
transmitting/receiving unit to said first transmit- 
ting/receiving unit, said enciphering data is enci- 
phered by said second identification data by said 
second signal processing unit and transmitted 
together with the data read out from said second so 
data storing unit. 

17. A data distributing apparatus according to claim 16. 
wherein said first signal processing unit decodes 
the data transmitted from said second transmit- ss 
ting/receiving unit and said enciphering data by 
said second identification data stored in said first 
storing unit and performs a decoding process of an 
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encryption performed by said enciphering data to 
the data decoded on the basis of the decoded enci- 
phering data. 

1 & A data distributing apparatus according to claim 1 6, 
wherein said first control unit performs an account- 
ing process on the basis of said enciphering data. 

1 9. A data distributing apparatus according to claim 1 6, 
wherein said enciphering data has a data portion 
which dynamically changes, and said first control 
unit discriminates said dynamically changing data 
portion, at every predetermined time, in said enci- 
phering data stored in said first data storing unit 
and transmitted together with the data from said 
second transmitting/receiving unit. 

20. A data distributing apparatus according to claim 1 9, 
wherein said first control unit controls the reading 
operation of the data stored in said first data storing 
unit on the basis of a discrimination result of said 
dynamically changing data portion. 

21. A data distributing apparatus according to claim 20, 
wherein said first control unit inhibits the reading 
operation of at least the data from said first data 
storing unit when the discrimination result of said 
dynamically changing data portion indicates that 
said enciphering data is not correct. 

22. A data distributing apparatus according to claim 1 6, 
wherein said enciphering data has a data portion 
which time-dependently changes, and said first 
control unit discriminates said time-dependently 
changing data portion, at every predetermined 
time, in said enciphering data stored in said first 
data storing unit and transmitted together with the 
data from said second transmitting/receiving unit. 

23. A data distributing apparatus according to claim 22, 
wherein said first control unit controls the reading 
operation of the data stored in said first data storing 
unit on the basis of a discrimination result of said 
time-dependently changing data portion. 

24. A data distributing apparatus according to claim 23, 
wherein said first control unit inhibits the reading 
operation of at least the data from said first data 
storing unit when the discrimination result of said 
time-dependently changing data portion indicates 
that a predetermined time has elapsed. 

25. A data distributing apparatus according to claim 1 6, 
further comprising a signal processing unit for fur- 
ther performing an enciphering process to the data 
decoded by said first signal processing unit on the 
basis of first identification data of another terminal 
equipment section of a destination to which the 
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data, is to be moved when the data stored in said 
first data storing unit is moved to said another termi- 
nal equipment section. 

26. A data distributing apparatus according to claim 25, 
wherein said first control unit deletes said encipher- 
ing data stored in said first data storing unit at a 
point when the movement of the data stored in said 
first data storing unit is finished. 

27. A terminal apparatus for data distribution, compris- 
ing: 

a storing unit in which first identification data 
that is peculiar to an apparatus and second 
identification data corresponding to said first 
identification data have been stored; 
a data transmitting/receiving unit for transmit- 
ting distribution request data of data together 
with said first identification data read out from 
said storing unit and receiving data which was 
enciphered by said second identification data 
and transmitted; 

a data storing unit for storing the data which 
was enciphered on the basis of said second 
identification data and received by said data 
transmitting/receiving unit; 
a signal processing unit for performing a 
decoding process to the date read out from 
said data storing unit on the basts of said sec- 
ond identification data stored in said storing 
unit; and 

a control unit for performing the operation to 
store the data received by said data transmit- 
ting/receiving unit into said data storing unit 
and controlling the decoding processing opera- 
tion by said signal processing unit of the data 
read out from said data storing unit. 

28. A terminal apparatus for data distribution according 
to claim 27, wherein the data received by said data 
transmitting/receiving unit and enciphering data 
serving as a source of encipherment performed to 
said data have been stored in said data storing unit, 
and said signal processing unit decodes the data 
read out from said data storing unit by said second 
identification data stored in said first storing unit 
and performs a decoding process of an encryption 
performed by said enciphering data to the data 
decoded on the basis of the decoded enciphering 
data. 

29. A terminal apparatus for data distribution according 
to claim 28, wherein said control unit performs an 
accounting process on the basis of said encipher- 
ing data. 

30. A terminal apparatus for data distribution according 



to claim 28, wherein said enciphering data has a 
data portion which dynamically changes, and said 
control unit discriminates said dynamically chang- 
ing data portion, at every predetermined time, in 
5 said enciphering data stored in said data storing 

unit together with the data. 

31 . A terminal apparatus for data distribution according 
to claim 30, wherein said control unit controls the 

w reading operation of the data stored in said data 
storing unit on the basis of a discrimination result of 
said dynamically changing data portion. 

32. A terminal apparatus for data distribution according 
is to claim 31, wherein said control unit inhibits the 

reading operation of at least the data from said data 
storing unit when the discrimination result of said 
dynamically changing data portion indicates that 
said enciphering data is not correct. 

20 

33. A terminal apparatus for data distribution according 
to claim 28, wherein said enciphering data has a 
data portion which time-dependently changes, and 
said control unit discriminates said time-depend- 

25 ently changing data portion, at every predeter- 
mined time, in said enciphering data stored in said 
data storing unit together with the data. 

34. A terminal apparatus for data distribution according 
30 to claim 30, wherein said control unit controls the 

reading operation of the data stored in said data 
storing unit on the basis of a discrimination result of 
said time-dependently changing data portion. 

35 35. A terminal apparatus for data distribution according 
to claim 31. wherein said control unit inhibits the 
reading operation of at least the data from said data 
storing unit when the discrimination result of said 
time-dependently changing data portion indicates 

40 that a predetermined time has elapsed. 

36. A terminal apparatus for data distribution according 
to claim 28. further comprising a signal processing 
unit for further performing an enciphering process 

45 to the data decoded by said signal processing unit 
on the basis of the first identification data of a des- 
tination to which the data is moved when the data 
stored in said data storing unit is moved, 

37. A terminal apparatus for data distribution according 
to daim 36, wherein said control unit deletes said 
enciphering data stored in said data storing unit at 
a point when the movement of the data stored in 
said data storing unit is finished. 
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